Add -v to the two calls to sslget. In case of an error we'll get more than just the returnval.

I also fixed a couple of old references to sslget. It used to be our SSL client before python-nss.


rob
>From 985152235cd18bffafeb07121a0eca86a80da08c Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcrit...@redhat.com>
Date: Wed, 22 Feb 2012 23:20:14 -0500
Subject: [PATCH] Add the -v option to sslget to provide more verbose errors

I noticed a couple of bad references in ipapython/dogtag.py and
fixed those as well. We used to call sslget for all our SSL client
needs before python-nss was written.

https://fedorahosted.org/freeipa/ticket/2391
---
 ipapython/dogtag.py             |    4 ++--
 ipaserver/install/cainstance.py |    2 ++
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/ipapython/dogtag.py b/ipapython/dogtag.py
index 20f2643..df569c4 100644
--- a/ipapython/dogtag.py
+++ b/ipapython/dogtag.py
@@ -74,8 +74,8 @@ def https_request(host, port, url, secdir, password, nickname, **kw):
         host = host.encode('utf-8')
     uri = 'https://%s%s' % (ipautil.format_netloc(host, port), url)
     post = urlencode(kw)
-    root_logger.info('sslget %r', uri)
-    root_logger.debug('sslget post %r', post)
+    root_logger.debug('https_request %r', uri)
+    root_logger.debug('https_request post %r', post)
     request_headers = {"Content-type": "application/x-www-form-urlencoded",
                        "Accept": "text/plain"}
     try:
diff --git a/ipaserver/install/cainstance.py b/ipaserver/install/cainstance.py
index 692a53d..d2c8d05 100644
--- a/ipaserver/install/cainstance.py
+++ b/ipaserver/install/cainstance.py
@@ -746,6 +746,7 @@ class CAInstance(service.Service):
         # mod_nss.
         args = [
             '/usr/bin/sslget',
+            '-v',
             '-n', 'ipa-ca-agent',
             '-p', self.admin_password,
             '-d', self.ca_agent_db,
@@ -765,6 +766,7 @@ class CAInstance(service.Service):
         # Now issue the RA certificate.
         args = [
             '/usr/bin/sslget',
+            '-v',
             '-n', 'ipa-ca-agent',
             '-p', self.admin_password,
             '-d', self.ca_agent_db,
-- 
1.7.6.5

_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to